CUNY Academic Commons

I don't have a problem with the functionality of the plugin for the most part, but it does allow for site administrators to execute arbitrary JavaScript, which is something we don't generally allow for security reasons.

Could you get Carlos to provide more info about what he hopes to use the plugin for? We may be able to provide a more targeted solution. Otherwise, I can look more carefully into what'd be required to block the unwanted features of the plugin.

Thanks, Marilyn.

I've put a fix into place that prevents the problematic 'onclick' attribute from being used. The rest of the plugin should be fine. https://github.com/cuny-academic-commons/cac/commit/18b20108bbfacf82b2a961b54d482c12625b89c2

This will be available after the next release, on the 9th.